Looking to track a new way scammers are exploring
Does anyone know what the following syntax means exactly
/^https?:\/\/[0-9a-z]*\.?[-0-9a-z]{4,}\.[a-z]{2,11}\/(?:[0-9a-z]{6,8}\/)?\/?\?u=[0-9a-z]{7}&o=[0-9a-z]{7}/$document,match-case
^ is the start of a string
[0-9a-z] to match any character from a-z or 0-9
[a-z]{2,11} to match any character from a-z but the length range must between 2 to 11
$ is the end of the string
but I'm confused with <$document,match-case>, especially at the end of a string.
That's something related to Python, but I don't get what's it's supposed to match. I mean obviously a document, but how you can "match case" a document in a url opened in a browser (or a list)?
Not even sure if I'm clear
I've worked with regex'es quite often, but i've never seen document,match-case at the end of a regex tbh... I'm wondering if `$document,match-case` is something that has been copied from somewhere else???
How i would read this regex:
/ => delimiter
^ => starts with
http => the literal string `http`
s? => zero or one `s` (so the regex will work for http:// and https://
:\/\/ => the literal string `://`
[0-9a-z]* => 0 to unlimited lowercase alphanumeric characters
\.? => zero or one dot
[-0-9a-z]{4,} => at least 4 alphanumeric lowercase characters OR dashes
\. => the literal string `.`
[a-z]{2,11} => between 2 and 11 lowercase letters
\/ => the literal string `/`
(?: => optional non capturing matchgroup start
[0-9a-z]{6,8} => between 6 and 8 lowercase alphanumeric characters
\/ => the literal string `/`
)? => optional match group end
\/? => the literal string `/` or nothing (``)
\?u= => the literal string `?u=`
[0-9a-z]{7} => exactly 7 lowercase alphanumeric characters
&o= => the literal string `&o=`
[0-9a-z]{7} => exactly 7 lowercase alphanumeric characters
/ => delimiter
$document,match-case => a piece of code, text,... that was accidentally pasted after the regex... Sure, $ demarks the end of the string, but it belongs inside the delimiter not outside
An interesting online free no-signup tool i use quite often when decypering (or creating) complex regexes is
https://regex101.com/...
So, if you leave out $document,match-case, the regex would match things like
http://soijsdf545.0sjkhlzef5.sfze/slidsjz/?u=1234567&o=1234567
https://lsiflz-sltlxis.cn/?u=1234567&o=1234567